If every guardian can discover every other guardian's npub via the federation's own consensus metadata (which anyone holding an invite code can read), how can you say that guardians can't discover each other and collude to steal funds?